$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: vevKlMwiGLvYNOedZVeA48X+TB3+fhrZeC/f9/MMJ1Y= Subject key identifier: CF:3F:20:47:E8:F2:3F:9C:91:6C:96:9C:E5:55:46:E3:16:CD:8A:AB Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 133A6D79E2B5BFF4F1C5490173C9287DBFA834FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: ED Signing time: Sat 14 Jun 2025 05:51:16 +0000 Manifest this update: Sat 14 Jun 2025 05:46:16 +0000 Manifest next update: Tue 17 Jun 2025 12:13:16 +0000 Files and hashes: 1: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: YW4o1D/zOgsnFCrvEuZJqAs5aorMV+PluJFJoBMeYBw=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3a:6d:79:e2:b5:bf:f4:f1:c5:49:01:73:c9:28:7d:bf:a8:34:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Jun 14 05:46:16 2025 GMT Not After : Jun 17 12:13:16 2025 GMT Subject: CN=CF3F2047E8F23F9C916C969CE55546E316CD8AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:79:da:44:60:4b:b6:91:ee:32:f2:96:d9: e3:5c:c7:cd:7b:82:02:15:fd:40:3b:43:7a:4a:e5: 14:73:e6:14:7e:16:05:fa:6c:b1:13:18:4e:ff:f4: 7f:38:d3:a9:6f:66:3f:d2:a3:ed:bd:ae:ca:ee:c8: 3d:d1:08:b7:74:10:e5:73:3a:9c:54:7b:ae:49:02: d3:73:a0:dc:49:02:3d:21:45:46:80:e8:d4:eb:7a: ed:49:60:0f:40:91:b1:46:dc:9a:b2:dd:1e:9a:eb: 38:08:62:30:b0:be:a0:86:c9:83:2b:bd:6e:23:66: 3e:b6:61:7b:f4:17:96:64:99:43:99:bf:7b:ab:ea: 26:45:c6:95:52:6f:98:02:64:b2:fb:96:63:3f:e6: 1e:34:a6:de:b1:f8:df:d3:d3:c5:59:8d:00:85:38: 72:38:d9:cf:e2:37:cb:da:2a:4e:ec:80:3c:20:85: c6:e3:3d:69:e8:62:25:d0:c5:de:d6:d9:5c:d5:0c: 84:fe:5d:a4:df:59:fa:96:94:2a:d4:b8:6a:47:71: 08:26:9a:fd:11:90:11:29:f2:47:e0:6f:ae:cc:9a: d9:2c:66:55:13:d0:32:87:38:88:a4:5e:67:fc:56: 2d:a7:74:d5:82:c0:d4:b8:89:f3:fc:0d:e7:0b:b4: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:20:47:E8:F2:3F:9C:91:6C:96:9C:E5:55:46:E3:16:CD:8A:AB X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:60:cb:da:14:5e:e2:25:ea:ab:3c:bb:61:34:cc:18:56: 31:98:b5:d6:3e:d6:0e:fb:4e:33:88:05:b1:85:d8:0a:59:17: 65:25:3d:42:8f:b4:ea:36:ee:78:d3:9f:d7:46:eb:a0:d2:95: ee:7b:ab:5f:f7:81:fd:dd:35:59:15:a0:f5:84:fc:11:4e:11: d6:f8:a0:b3:fd:07:cd:d8:db:b1:3b:58:7a:94:e2:e1:a2:c3: ca:27:27:25:7f:00:6a:4b:6d:27:d3:1b:33:13:f2:98:bf:6e: 72:b7:7d:65:d5:c8:47:86:ea:cd:b6:7d:d8:95:f6:f1:ab:94: 4b:98:4b:79:5a:07:1e:6d:5a:ad:59:81:f6:3d:ec:fb:48:84: 45:51:b8:3b:0b:bf:76:86:11:ec:19:09:4d:c1:77:24:85:13: e4:a4:19:b4:3a:41:f4:7a:df:55:3d:7d:4c:c7:89:76:f3:f5: bd:50:8f:92:1c:10:f3:9a:13:39:0c:dc:b4:99:8c:46:0e:dd: d9:ee:f6:48:0a:28:c8:35:19:69:47:32:e8:03:58:00:f1:04: b1:bc:5a:00:ae:b3:d3:56:47:79:51:fd:f3:b4:b9:cc:aa:a5: 13:29:39:4b:3c:a8:70:89:de:e6:5e:c9:fe:04:be:d7:eb:cd: 2b:99:e7:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzpteeK1v/TxxUkBc8kofb+oNP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA2MTQwNTQ2MTZaFw0yNTA2MTcxMjEzMTZaMDMxMTAvBgNV BAMTKENGM0YyMDQ3RThGMjNGOUM5MTZDOTY5Q0U1NTU0NkUzMTZDRDhBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9XnaRGBLtpHuMvKW2eNcx817 ggIV/UA7Q3pK5RRz5hR+FgX6bLETGE7/9H8406lvZj/So+29rsruyD3RCLd0EOVz OpxUe65JAtNzoNxJAj0hRUaA6NTreu1JYA9AkbFG3Jqy3R6a6zgIYjCwvqCGyYMr vW4jZj62YXv0F5ZkmUOZv3ur6iZFxpVSb5gCZLL7lmM/5h40pt6x+N/T08VZjQCF OHI42c/iN8vaKk7sgDwghcbjPWnoYiXQxd7W2VzVDIT+XaTfWfqWlCrUuGpHcQgm mv0RkBEp8kfgb67MmtksZlUT0DKHOIikXmf8Vi2ndNWCwNS4ifP8DecLtO/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzz8gR+jyP5yRbJac5VVG4xbNiqswHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH9YMvaFF7iJeqrPLthNMwYVjGYtdY+1g77 TjOIBbGF2ApZF2UlPUKPtOo27njTn9dG66DSle57q1/3gf3dNVkVoPWE/BFOEdb4 oLP9B83Y27E7WHqU4uGiw8onJyV/AGpLbSfTGzMT8pi/bnK3fWXVyEeG6s22fdiV 9vGrlEuYS3laBx5tWq1ZgfY97PtIhEVRuDsLv3aGEewZCU3BdySFE+SkGbQ6QfR6 31U9fUzHiXbz9b1Qj5IcEPOaEzkM3LSZjEYO3dnu9kgKKMg1GWlHMugDWADxBLG8 WgCus9NWR3lR/fO0ucyqpRMpOUs8qHCJ3uZeyf4EvtfrzSuZ56M= -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:59 2025 by rpki-client